CVE-2023-6063
HIGH NUCLEIWordPress WP Fastest Cache Unauthenticated SQLi (CVE-2023-6063)
Title source: metasploitExploitation Summary
EIP tracks 6 public exploits for CVE-2023-6063.
PoCs published by motikan2010, Eulex0x, incommatose, including Metasploit module auxiliary/scanner/http/wp_fastest_cache_sqli.
A Nuclei detection template is also available.
AI-analyzed exploit summary This PoC demonstrates an unauthenticated SQL injection vulnerability in WP Fastest Cache via the 'wordpress_logged_in' cookie parameter. It uses sqlmap to exploit the vulnerability and dump database schema.
Description
The WP Fastest Cache WordPress plugin before 1.2.2 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users.
Exploits (6)
This PoC demonstrates an unauthenticated SQL injection vulnerability in WP Fastest Cache via the 'wordpress_logged_in' cookie parameter. It uses sqlmap to exploit the vulnerability and dump database schema.
This repository provides a proof-of-concept for CVE-2023-6063, an unauthenticated SQL injection vulnerability in WP Fastest Cache plugin. The exploit leverages the 'wordpress_logged_in' cookie parameter to perform SQL injection attacks using sqlmap.
This repository contains a functional Python-based PoC for CVE-2023-6063, a time-based blind SQL injection vulnerability in WP Fastest Cache ≤1.2.2. The exploit extracts password hashes and emails from the `wp_users` table via crafted `wordpress_logged_in` cookie payloads.
This repository contains a README describing an SQL Injection vulnerability in WP Fastest Cache (CVE-2023-6063). No actual exploit code or proof-of-concept is provided.
This repository provides a functional PoC for CVE-2023-6063, an unauthenticated SQL injection vulnerability in WP Fastest Cache 1.2.2. The exploit leverages the 'wordpress_logged_in' cookie parameter to inject SQL queries, demonstrated using sqlmap.
This Metasploit module exploits an unauthenticated SQL injection vulnerability in WordPress WP Fastest Cache via the 'wordpress_logged_in' cookie. It performs a time-based blind SQL injection to retrieve user credentials from the database.
Nuclei Templates (1)
http.html:/wp-content/plugins/wp-fastest-cache/
body=/wp-content/plugins/wp-fastest-cache/
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N